ubsan: next_char_of_string signed integer overflow

Squash another totally useless fuzz report that I should have ignored.

	* read.c (next_char_of_string): Avoid integer overflow.